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Information  Sharing  Is  a  Strategic  Imperative 


General  James  E.  Cartwright,  USMC 
United  States  Strategic  Command 


Americans  are  familiar  with  the  host  of  new  challenges  posed  bj  the  forces  of  international  terrorism,  hut  one  of  the  great¬ 
est  threats  we  face  may  not  be  human  at  aU,  it  may  he  a  virus.  John  Barry’s  hook  “The  Great  Influenza”  details  the  flu 
pandemic  of  1918  that  killed  more  than  50  million  people  around  the  world.  At  one  point,  the  flu  spread  so  quickly  that 
some  government  leaders  feared  a  complete  breakdown  of  civilisation  was  only  weeks  away  [1],  The  Avian  Flu  might  or  might 
not  turn  into  the  next  big  threat,  not  only  to  the  United  States,  hut  to  its  adversaries  as  well  The  next  big  threat  could  be  a 
natural  disaster  or  something  unanticipated. 


As  the  nation  checks  its  horizon  for 
the  unexpected,  it  must  not  take  its 
eyes  off  known  threats  and  continue 
preparation  for  them.  Both  expected 
and  unexpected  cases  require  building  a 
collaborative  approach  to  face  any 
threat  America  may  face.  As  the  realities 
of  warfare  and  international  security 
constantly  evolve,  the  nation’s  strategy 
and  willingness  to  work  cooperatively 
must  also  evolve.  There  is  a  need  for  a 
collaborative  approach  among  like- 
minded  individuals  and  agencies  to 
meet  the  challenges  we  face  by  merging 
our  capabilities.  A  cultural  change  needs 
to  take  place  across  all  the  elements  of 
international  security  to  counter  the 
threats  faced  today  as  well  as  tomorrow. 

Successfully  combating  weapons  of 
mass  destruction  (WMDs),  for  example, 
requires  both  military  and  civilian  sup¬ 
port  to  share  technology  and  protect 
infrastructure.  Failure  to  move  beyond 
traditional  boundaries  risks  sub-opti¬ 
mizing  the  potential  for  success.  There 
is  no  alternative  to  establishing  robust, 
collaborative  relationships.  The  military, 
civil,  and  commercial  interests  of  our 
nation  all  depend  on  the  willingness  to 
involve  one  another  and  fully  enhance  a 
shared  worldview. 

Facing  Today’s  Adversaries 

Among  the  challenges  faced  today  are 
the  unexpected,  asymmetric  methods 
that  may  be  used  by  terrorists  or  other 
adversaries.  These  adversaries  will  not 
be  reluctant  to  use  WMDs:  biological, 
chemical,  or  nuclear.  Meeting  the  threat 
requires  the  ability  to  reach  across  all  of 
the  nation’s  security  and  defense  ele¬ 
ments  to  leverage  the  potential  of 
America’s  economic  and  military  infra¬ 
structure.  This  coordinated  network 
must  be  able  to  effectively  employ  capa¬ 
bilities  against  any  adversary. 

The  nation’s  economy,  quality  of 
life,  and  defense  structures  are  all  linked 
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together  in  a  global  tapestry.  The  price 
of  coffee  and  oil,  a  story  on  A1  Jazeera, 
or  a  tsunami  on  the  other  side  of  the 
planet  all  have  direct  impact  on  daily  life 
in  this  global  environment. 

Net-Centric  Integration 

Because  America’s  vital  military  and 
economic  interests  are  at  stake,  net-cen¬ 
tric  integration  of  our  defense  and  secu¬ 
rity  options  provides  a  strategic  advan- 

**The  nation's  economy, 
quality  of  life,  and 
defense  structures  are  all 
linked  together  in  a 
global  tapestry.  The  price 
of  coffee  and  oil,  a  story 
on  Al  Jazeera,  or  a 
tsunami  on  the  other 
side  of  the  planet  all 
have  direct  impact  on 
daily  life  in  this  global 
environment.^* 

tage  to  face  asymmetric  threats.  For  its 
part  in  developing  new  approaches  to 
integrate  and  synchronize  actions, 
empower  subordinates,  and  increase 
operational  speed,  U.S.  Strategic  Com¬ 
mand  (USSTRATCOM)  is  moving  for¬ 
ward  on  two  fronts.  The  first  is  re-tool- 
ing  organizational  and  informational 
structures  to  make  better  use  of  all 
resources.  The  second  front  is  actually 
more  difficult.  It  involves  changing  the 


way  human  beings  think  about  things 
and  the  military’s  basic  cultural 
approaches  to  problems. 

USSTRATCOM  is  transforming 
both  old  culture  and  old  structure.  One 
of  the  command’s  contributions  in  the 
world  of  information  assurance  (lA) 
and  net-centric  operations  involves 
blogging  on  the  newly  installed 
Strategic  Knowledge  Integration-Web 
(SKI-Web)  network.  On  my  orders,  any 
airman,  seaman,  or  private  first  class 
can  blog  information  on  SKI-Web. 
Contributors  buy  their  way  into  the 
blog  with  the  value  added  —  not  the  rank 
held.  Stars  and  stripes  are  both  welcome. 
Waiting  for  perfect  information  that 
plods  through  the  same  old  napoleonic 
structure  can  make  decisions  irrelevant 
in  today’s  world.  To  be  effective,  how¬ 
ever,  culture  change  also  requires  alter¬ 
ing  organizational  constructs. 

USSTRATCOM  is  also  rebuilding 
its  structure  by  establishing  Joint 
Functional  Component  Commands 
(JFCC)  that  align  responsibilities  and 
authorities,  decentralize  operational 
execution,  and  increase  operational 
speed.  JFCCs  are  manned  by  STRAT- 
COM  planners  and  operators  taken 
from  our  headquarters  staff.  Rather 
than  build  new  organizations,  JFCCs 
work  side-by-side  with  and  take  full 
advantage  of  already  existing  centers  of 
excellence  that  have  complementary 
expertise  and  authorities. 

JFCC  Network  Warfare  (JFCC-NW) 

JFCC-NW  is  collocated  with  the 
National  Security  Agency  (NSA),  and 
the  commander  of  JFCC-NW  is  dual- 
hatted  as  the  director  of  the  NSA. 
While  the  structure  has  changed,  real 
success  requires  alterations  in  culture. 
Military  and  government  civilian  teams 
must  get  used  to  doing  business  togeth¬ 
er  rather  than  remaining  in  their  old, 
comfortable  lanes.  They  must  establish 
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new  lines  of  communication  and  new 
lines  of  authority.  Both  sides  must  be 
onboard  to  determine  what  procedures 
are  required  for  mission  execution  and 
their  joint  role  in  I  A.  This  effort  is  crit¬ 
ical  to  supporting  efforts  to  integrate 
and  distribute  the  data  that  drives 
knowledge  and  ultimately  action. 

For  information  capabilities  to  be  of 
real  value  today,  warfighters  must  be 
able  to  plug  and  play  in  a  joint  global 
environment.  Acquiring  the  ability  to 
plug  and  play  requires  revolutionizing 
the  mechanism  for  consistently  incor¬ 
porating  information  technology,  con¬ 
trolling  the  configuration  of  technical 
components,  and  ensuring  compliance 
with  technical  building  codes.  Profession¬ 
als  must  constantly  review  the  architec¬ 
tures  necessary  to  provide  this  vital 
mechanism  as  it  serves  warfighters. 

In  this  endeavor,  JFCC-NW  has  a 
full  partner  in  Joint  Task  Force  Global 
Network  Operations  0TF-GNO),  now 
collocated  with  the  Defense  Infor¬ 
mation  Systems  Agency  (DISA).  The 
JTF-GNO  commander  also  serves  as 
the  Director  of  DISA.  Together  they 
are  treating  networks  as  if  they  were  a 
weapons  system  because  they  are  cer¬ 
tainly  an  extension  of  warfighting 
efforts.  That  fact  is  reflected  in  the 
training  designed  today  as  well  as  in  the 
standardization  of  processes.  In  its  cur¬ 
rent  incarnation,  JTF-GNO  has  been 
around  for  less  than  two  years.  It 
reflects  a  belief  that  the  people  operat¬ 
ing  networks  should  be  the  same  people 
who  defend  those  networks. 

JFCC-Space  and  Global  Strike 
(SGS) 

As  for  USSTRATCOM’s  other  mission 
areas,  JFCC-SGS  is  responsible  for  inte¬ 
grating  planning  and  command  and  con¬ 
trol  (C-2)  support  for  the  rapid  delivery 
of  extended  range,  precision  effects  in 
support  of  theater  or  national  objec¬ 
tives.  SGS  mission  responsibilities  now 
require  the  capacity  to  rapidly  and  accu¬ 
rately  reach  any  adversary  on  the  planet 
with  kinetic  or  nonkinetic  effects.  JFCC- 
SGS  is  led  by  the  same  three-star  gener¬ 
al  who  commands  the  8th  Air  Force  —  a 
large  part  of  USSTRATCOM’s  global 
strike  arm.  SGS  plans  global  strike  activ¬ 
ities  and  serves  as  lead  integrator  of 
joint  effects  across  the  range  of 
USSTRATCOM’s  capabilities.  SGS  also 
runs  STRATCOM’s  Global  Operations 
Center  and  serves  as  the  commander’s 
eyes  and  ears  for  situational  awareness. 

With  the  merger  of  the  former  with 


Space  Command  in  2002,  the  new 
STRATCOM  also  directs  the  deliberate 
planning  and  execution  of  assigned 
space  operation  missions.  A  new  Joint 
Space  Operations  Center  (JSpOC)  has 
stood  up,  led  by  the  same  two-star  gen¬ 
eral  who  commands  the  14th  Air  Force 
—  the  largest  part  of  STRATCOM’s 
space  arm.  Establishment  of  the  JSpOC 
and  designation  of  a  Commander,  Joint 
Space  Operations  (JSO),  brings  true 
joint  perspective  and  capability  to  the 
space  operations  world.  The  JSpOC  cuts 
across  boundaries  to  direct  all  elements 
of  DoD  space  capabilities  from  daily 
space  operations  through  space  support 
to  the  regional  combatant  commands. 


will  take  a 
team  effort  to  meet 
challenges  on  issues 
os  complicated  os 
international  treaty 
interpretation  and 
os  basic  as  the 
safety  of  our  notion's 
food  supply/* 


JFCC-Integrated  Missile  Defense 
(IMD) 

JFCC-IMD  is  headquartered  in 
Colorado  Springs,  Co.,  to  take  advan¬ 
tage  of  missile  defense  activities  located 
there.  The  commander  of  JFCC-IMD  is 
dual-hatted  as  the  commander  of  Army 
Space  and  Missile  Defense  Command. 
While  the  Missile  Defense  Agency  has 
the  specific  assignment  to  develop  mis¬ 
sile  defense  systems,  it  continues  to  be 
the  job  of  JFCC-IMD  to  offer  a 
warfighter’s  focus  and  make  the  system 
operational  by  planning,  integrating, 
and  coordinating  global  missile  defense 
operations  and  support  (sea,  land,  air, 
and  space-based). 

JFCC-intelligence,  Surveillance, 
and  Reconnaissance  (ISR) 

JFCC-ISR  plans,  integrates,  and  coordi¬ 
nates  intelligence,  surveillance,  and 
reconnaissance  in  support  of  strategic 
and  global  operations  and  strategic 
deterrence.  This  includes  coordinating 
ISR  capabilities  in  support  of  global 


strike,  missile  defense,  and  associated 
planning.  JFCC-ISR  is  collocated  with 
the  Defense  Intelligence  Agency  (DIA) 
and  the  commander  of  JFCC-ISR  is 
dual-hatted  as  the  director  of  DIA. 

Success  in  today’s  environment 
requires  effectively  coordinating  all 
intelligence  collection  capabilities.  The 
information  collected  must  then  be 
made  available  to  a  wide  range  of  cus¬ 
tomers  based  on  a  secured  need-to-share 
basis  rather  than  the  old  need-to-know 
threshold. 

Combating  WMDs 

In  January  2005,  USSTRATCOM  was 
assigned  the  mission  of  integrating  and 
synchronizing  DoD  efforts  to  combat 
WMDs  and  has  looked  to  the  Defense 
Threat  Reduction  Agency  (DTRA)  as  a 
partner.  The  new  WMD  center  is  mod¬ 
eled  on  the  other  JFCCs,  but  is  headed 
by  a  civilian  director  —  in  this  case,  dual- 
hatted  as  the  director  of  DTRA.  The 
first  priority  is  rapidly  advocating  devel¬ 
opment  and  implementation  of  capabil¬ 
ities  to  support  interdicting  and  elimi¬ 
nating  WMD  and  its  related  materials. 
Since  terrorists  do  not  distinguish 
between  America’s  civilian  and  military 
establishments,  the  nation  must  look  at 
potential  military  and  civilian  targets 
and  vulnerabilities  alike.  The  WMD 
center  links  military  interests  with  pri¬ 
vate  industry  leaders  to  share  informa¬ 
tion,  assess  vulnerabilities,  and  develop 
deterrent,  detection,  and  response  capa¬ 
bilities.  It  will  take  a  team  effort  to  meet 
challenges  on  issues  as  complicated  as 
international  treaty  interpretation  and 
as  basic  as  the  safety  of  our  nation’s 
food  supply.  America  is  truly  a  nation  at 
war,  and  private  industry  is  certainly 
doing  its  part  in  supporting 
USSTRATCOM’s  newest  mission  area. 

The  Challenge  of  Change 

As  USSTRATCOM  integrates  joint, 
geographically  separated,  interdepen¬ 
dent  operations,  technical  issues  must 
be  worked  out.  However,  the  greatest 
challenge  to  building  global  integration 
will  be  achieving  the  cultural  change 
referred  to  earlier  in  this  article.  This 
cultural  change  is  not  optional.  It  must 
occur  in  order  to  build  a  responsive 
command  that  can  truly  reach  across 
multiple  organizations  and  missions  to 
deliver  integrated  joint  effects. 
Everyone  understands  the  need  for 
change  until  it  affects  him  or  her  per¬ 
sonally.  But  moving  further  into  the 
21st  century  requires  replacing  need  to 
know  with  need  to  share  to  achieve  the  full 
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strategic  potential  of  net-centric  opera¬ 
tions.  That  means  partnerships  must 
grow  and  mature  as  the  military,  gov¬ 
ernment,  civilian,  and  industrial  com¬ 
munities  build  on  a  long  history  of 
cooperation  to  optimize  both  current 
and  future  issues  of  interoperability. 
These  partnerships  must  include  the 
nation’s  best  minds  and  resources  in 
academia  and  private  industry,  as  well  as 
coalition  partners  and  both  the  civilian 
and  military  sides  of  government. 

Success  requires  adopting  data-tag- 
ging  standards  and  lA  policies  to 
increase  government-wide,  trusted 
information  sharing.  It  requires  sup¬ 
porting  dynamic,  persistent,  trustwor¬ 
thy,  collaborative  planning,  with  user- 
defined  operating  pictures,  using  dis¬ 
tributed,  globally  available  information. 
The  command  is  not  there  yet.  But 
thanks  to  professionals  in  the  military, 
government  service,  and  private  indus¬ 
try,  USSTRATCOM  is  improving  its 
global  capabilities.  That,  in  turn,  will 
allow  America’s  defense  and  security 
structure  to  take  full  advantage  of  the 
culture  change  as  it  evolves.  To  deliver 
the  capabilities  needed  to  combat  the 


threats  of  the  21st  century,  USSTRAT¬ 
COM  is  rebuilding  and  restructuring 
America’s  national  C2  apparatus 
through  a  growing  system  of  operation 
centers.  Building  these  joint,  geographi¬ 
cally  separated,  interdependent  opera¬ 
tions  meets  our  imperative  need  to  pur¬ 
sue  high  capacity,  Internet-like  capabili¬ 
ties.  It  creates  an  indestructible  C2  net¬ 
work  as  it  extends  the  Global 
Information  Grid  to  deployed  and 
mobile  users  worldwide.  This  is  vital  to 
maintaining  our  traditional  global  deter¬ 
rence  at  the  same  time  we  move  all  mis¬ 
sion  operations  at  the  speed  of  light 
through  high-capacity,  virtual  collabora¬ 
tive  networks.  The  men  and  women 
who  serve  this  command  are  aggres¬ 
sively  moving  out  on  actions  to  ensure 
USSTRATCOM  fulfills  its  full  set  of 
global  responsibilities,  supporting 
national  security  needs  in  peace  and  in 
war.^ 
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The  New  Java  Security  Architecture 

Idongesit  Mkpong- Ruffin  and  Dr.  John  A.  Hamilton,  Jr. 

Department  of  Computer  Science  and  Software  Engineering 

Auburn  University 
Dr.  Martin  C.  Carlisle 
Department  of  Computer  Science 
United  States  Air  Force  Academy 

Java’s  original  security  architecture  was  designed  to  facilitate  exe¬ 
cuting  software  from  remote  systems  while  simultaneously  pre¬ 
venting  downloaded  code  from  performing  unauthorized  opera¬ 
tions  on  host  machines.  The  sandbox  model  of  the  Java 
Development  Kit  1 .0’s  security  architecture  was  found  to  be  too 
restrictive;  therefore,  the  model  was  modified  so  that  remote  code 
could  be  allowed  as  trusted  code.  In  the  Java  2  platform,  the 
notion  of  trusted  code  was  removed  and  security  control  mecha¬ 
nisms  were  implemented  that  could  be  applied  to  both  applica¬ 
tion  and  applet  code  so  the  code  could  be  run  with  configurable 
trust.  Java  developers  need  to  understand  and  incorporate  the  new 
Java  security  architecture  into  their  development  process  to  make 
certain  their  applications  are  secure.  This  article  looks  at  the 
implementation  of  the  new  architecture  and  the  new  mechanisms 
provided  for  ensuring  security  for  Java  code.  It  details  the  motiva¬ 
tion  for  the  security  changes  in  a  security  architecture,  gives  a  gen¬ 
eral  overview  of  the  architecture  added,  and  looks  at  some  of  the 
details  of  the  mechanisms  either  changed  or  provided  by  the  new 
architecture. 


Software  Cost  Estimating: 

A  Cyclical  Conundrum 

Ellen  Walker 
Data  and  Analysis  Center  for  Software 

This  article  describes  the  dilemma  of  some  organizations  in  estab¬ 
lishing  credible  software  estimates,  proposes  some  guiding  princi¬ 
ples  and  practices  for  improving  the  process,  and  addresses  how 
current  software  best  practices  may  play  a  role  in  the  journey  to 
achieving  accurate  software  estimations.  It  seems  that  in  spite  of 
acquisition  reform,  in  spite  of  our  decade-long  focus  on  achieving 
software  process  maturity,  in  spite  of  our  adoption  of  modern 
structured  development  approaches,  we  (the  software  acquisi¬ 
tion/development  community)  still  have  problems  achieving  suc¬ 
cess  (defined  as  delivering  a  quality  product  on  time  and  within 
budget).  Perhaps  the  incentives  are  not  strong  enough  to  compel 
us  to  deliver  quality  Perhaps  our  focus  is  skewed  in  favor  of  cost 
or  delivery  time  over  quality.  Perhaps  our  cost  estimating  practices 
(or  lack  thereof)  are  impacting  our  success  with  software  devel¬ 
opment.  The  hundreds  of  articles  on  software  estimation  and  soft¬ 
ware  metrics,  and  hundreds  of  hours  spent  in  research  and  devel¬ 
opment  of  estimation  techniques  have  not  focused  on  the  people 
and  cultural  issues  surrounding  estimating  and  data  collection. 
Consequently,  the  reality  of  cost  estimating  and  perceptions  of 
practioners  toward  it,  are,  for  the  most  part,  vastly  different  from 
what  the  literature  describes. 
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